Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: lPrzsUldC066DKf8/seC8GQw65UkSKidm4wPY+8rzSU=
Subject key identifier: 4E:4A:20:3A:5A:25:FD:BE:DB:C4:F1:37:C2:1B:A7:94:16:0C:35:C9
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 0194BD4E3DC53C49A7A16D54EC4E584A864B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 113D
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: ccuHFxW1vRfz0v4aP7+Zaw+YgDjdhWj/qEoW8R2BJtM=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3d:c5:3c:49:a7:a1:6d:54:ec:4e:58:4a:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=4e4a203a5a25fdbedbc4f137c21ba794160c35c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:ee:bb:2f:26:e6:ae:ef:9a:39:0e:42:5a:
82:21:31:bf:d6:1d:8b:15:fb:ad:4c:30:2d:28:5e:
07:f5:72:e6:f6:53:40:5a:f6:4f:67:2f:d6:f7:19:
5f:5f:64:07:cc:3b:d9:5b:60:07:42:5b:5b:68:4d:
52:6b:38:3c:48:4c:ff:3b:22:22:7a:b2:81:49:4d:
ed:31:05:9f:10:bf:f8:c9:0c:b3:9d:29:2c:31:4a:
44:a5:ae:9a:82:23:93:65:3a:a6:46:e5:ee:66:5a:
2e:7c:15:ca:b6:9b:83:ee:19:d5:6e:de:6e:b8:70:
21:a9:c2:f7:a1:68:18:8e:19:98:f0:a0:cd:21:4d:
c8:c7:95:b0:aa:4c:32:98:cd:c8:21:7d:3d:9f:c3:
d9:a3:a3:90:4b:4e:9d:c6:c4:01:00:18:0e:39:41:
0f:0d:36:61:d6:07:1c:22:f8:61:7f:98:bf:b9:1c:
25:40:ce:bb:1f:d8:c2:63:3a:67:74:bb:b8:a4:58:
2b:70:75:d1:6d:07:de:1d:c1:d2:36:76:86:0b:a1:
4e:a7:54:4a:ad:9a:a5:32:a9:b7:93:c7:fb:38:40:
6e:02:71:f3:65:cb:93:9f:7a:fe:50:42:25:4f:28:
c1:28:79:21:4f:06:49:f3:65:80:3f:e1:b2:0b:a3:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4A:20:3A:5A:25:FD:BE:DB:C4:F1:37:C2:1B:A7:94:16:0C:35:C9
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:47:97:ff:af:d9:c7:7d:3f:ae:85:48:07:be:8d:f6:1c:b0:
3e:b1:1c:8a:49:16:2d:f3:20:44:b9:47:96:d6:cd:9d:98:ad:
c4:c4:61:06:77:6d:08:cd:2b:f0:1a:6d:98:26:7d:73:23:99:
29:3e:81:90:3d:d4:74:56:e6:37:c0:c1:91:ef:d1:90:0c:6d:
b6:49:5c:7d:ba:ed:ff:88:96:ac:1a:17:5b:db:86:f2:b3:7d:
69:65:8c:00:53:42:71:8f:16:69:5a:50:e6:17:18:42:5d:7d:
60:51:96:3a:1f:fc:96:51:23:81:31:53:3d:cb:49:c7:fc:72:
bb:ed:54:21:7e:68:0e:85:5b:46:44:bb:d1:d8:8e:23:6a:e2:
04:aa:db:d5:b7:ca:1e:54:32:1c:e2:18:44:0a:b7:07:6d:f6:
2f:e0:e1:69:05:0e:c0:73:60:1b:2f:98:6f:b1:0f:b1:b3:d1:
c4:00:88:a9:df:cf:ae:3b:0d:7e:0e:7c:50:f3:2d:2a:eb:f4:
55:86:15:76:b2:86:8b:d8:03:9e:de:50:54:ee:32:44:2c:39:
27:fb:35:cb:83:b1:67:20:b7:df:6b:ae:f3:04:d5:d9:fd:72:
02:be:af:0b:de:e8:f5:6b:a6:33:a7:3f:2f:e2:62:95:d6:a8:
78:da:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:56 2025 by rpki-client